Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier: He2pqSW3f3vApC6r+CUInuDzTUycgHOzKN3otQFBU94=
Subject key identifier: EC:5A:91:74:C7:28:BE:08:D8:E4:32:CE:6A:95:E9:D9:D9:1E:3C:AF
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 0874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number: 0869
Signing time: Fri 28 Mar 2025 20:56:29 +0000
Manifest this update: Fri 28 Mar 2025 20:56:29 +0000
Manifest next update: Fri 04 Apr 2025 20:56:29 +0000
Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: TB47i349fRuERyUXYycNWTh717wGnUN96CfOah/il2c=)
2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: hcolG+bA9kqJJPc6IsihTDFxcpdloDt804WFQ6sb6CQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857
Validity
Not Before: Mar 28 20:56:29 2025 GMT
Not After : Apr 4 20:56:29 2025 GMT
Subject: CN=67e70cfd-634a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:23:30:fb:6f:d0:4a:9b:0d:34:f6:a1:73:
bb:93:db:f0:83:11:58:a1:46:ad:11:cc:aa:00:42:
0b:92:c0:30:01:aa:90:bd:bb:6e:94:66:60:b4:0b:
be:50:94:b6:0d:a6:0c:67:82:6d:2c:0a:be:8d:ef:
6f:b5:99:8b:35:d7:ff:03:ba:44:4d:90:18:6a:98:
80:9f:70:9f:05:d1:10:07:f5:41:25:37:9f:62:23:
ae:0e:22:96:9e:c1:98:0a:bb:76:46:66:2e:28:51:
5d:fa:e5:b3:01:4c:bf:81:7c:8a:3e:f4:a5:85:82:
f8:b8:12:03:a0:02:ab:d2:e3:99:01:b0:d1:b7:dd:
bb:79:2d:ee:b8:d0:23:09:b5:76:c6:c6:b9:d9:bf:
78:fe:21:f9:bc:ae:cb:64:14:dc:92:cf:13:c0:2a:
0f:09:71:76:43:c7:33:d5:eb:ed:cc:6e:82:11:ec:
3a:9f:df:dc:00:40:38:be:4f:00:00:cc:f1:37:69:
d5:f8:9e:89:82:6e:79:43:9d:32:e2:c2:fc:b4:42:
d1:d0:e2:dc:40:f5:f8:1b:a0:c8:0b:2c:10:b1:60:
c0:cd:72:24:88:93:0f:06:d9:a6:de:97:be:c4:50:
7d:d1:a8:80:79:dd:a4:71:56:67:f7:25:e6:0a:4d:
89:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:91:74:C7:28:BE:08:D8:E4:32:CE:6A:95:E9:D9:D9:1E:3C:AF
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:01:61:cc:44:2b:84:0e:c2:07:f5:63:35:77:14:d2:68:e9:
a3:22:96:04:b6:e3:fa:54:80:fb:1a:d2:46:7b:af:ff:9e:44:
81:46:c1:5d:18:2e:a1:58:e1:4f:92:4d:39:72:bb:ea:47:06:
82:a0:98:1a:ee:53:85:d0:f8:36:4d:39:c4:a8:9c:87:21:dd:
80:ef:80:bb:fe:be:79:7e:9b:1d:98:a7:21:34:36:d0:28:73:
91:20:ca:9b:cc:f9:bc:25:79:40:d1:ee:d2:66:4d:d1:91:e0:
28:62:49:f9:08:64:32:08:0d:36:24:71:6b:c7:bb:5d:7a:c2:
3f:2e:ba:0d:cc:d1:5c:6b:fc:4d:0d:f2:db:4f:f4:76:cb:c7:
47:e0:a1:1b:50:dc:24:d3:e8:ff:37:7b:fd:2d:b0:c8:ad:a1:
81:29:79:d5:99:d4:e6:d6:17:d1:88:53:27:2b:60:69:88:07:
72:12:b5:08:6f:5c:de:e0:79:5f:6a:51:de:be:e4:3d:32:2e:
15:b9:32:b6:e9:1d:b0:94:61:08:4d:a1:86:71:90:d8:89:a0:
45:18:24:4e:72:c9:95:76:5c:ff:08:ed:d5:64:3f:e7:54:85:
f0:a1:b2:d4:a8:33:19:47:1d:c9:2e:36:d2:47:39:eb:d3:1d:
11:bf:03:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ4NTcxMTAvBgNVBAUTKDNENzc1M0ZERUJCMjJGMDkzQTcxMDIxQTgzRDY1ODY2
NTVFOTI0QTAwHhcNMjUwMzI4MjA1NjI5WhcNMjUwNDA0MjA1NjI5WjAYMRYwFAYD
VQQDEw02N2U3MGNmZC02MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvV0jMPtv0EqbDTT2oXO7k9vwgxFYoUatEcyqAEILksAwAaqQvbtulGZgtAu+
UJS2DaYMZ4JtLAq+je9vtZmLNdf/A7pETZAYapiAn3CfBdEQB/VBJTefYiOuDiKW
nsGYCrt2RmYuKFFd+uWzAUy/gXyKPvSlhYL4uBIDoAKr0uOZAbDRt927eS3uuNAj
CbV2xsa52b94/iH5vK7LZBTcks8TwCoPCXF2Q8cz1evtzG6CEew6n9/cAEA4vk8A
AMzxN2nV+J6Jgm55Q50y4sL8tELR0OLcQPX4G6DICywQsWDAzXIkiJMPBtmm3pe+
xFB90aiAed2kcVZn9yXmCk2JsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxakXTH
KL4I2OQyzmqV6dnZHjyvMB8GA1UdIwQYMBaAFD13U/3rsi8JOnECGoPWWGZV6SSg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDg1Ny81MzgwRUY2Q0JG
N0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3azZjUUlhZzlaWVpsWHBK
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYZFRfZXV5THdrNmNRSWFnOVpZWmxYcEpLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDg1Ny81MzgwRUY2Q0JGN0UxMUVBQjZGQTM3NUZDNEY5QUUwMi9QWGRUX2V1eUx3
azZjUUlhZzlaWVpsWHBKS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBAWHMRCuEDsIH9WM1dxTSaOmjIpYEtuP6VID7GtJGe6//nkSBRsFd
GC6hWOFPkk05crvqRwaCoJga7lOF0Pg2TTnEqJyHId2A74C7/r55fpsdmKchNDbQ
KHORIMqbzPm8JXlA0e7SZk3RkeAoYkn5CGQyCA02JHFrx7tdesI/LroNzNFca/xN
DfLbT/R2y8dH4KEbUNwk0+j/N3v9LbDIraGBKXnVmdTm1hfRiFMnK2BpiAdyErUI
b1ze4HlfalHevuQ9Mi4VuTK26R2wlGEITaGGcZDYiaBFGCROcsmVdlz/CO3VZD/n
VIXwobLUqDMZRx3JLjbSRznr0x0RvwPn
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:03 2025 by rpki-client